Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0343EF1DEA18792E0AE8AC7E01E1B65B5ED71A8E0E2FFA4B64BB7C114402F61E/0/3230302e31302e3233332e302f32342d3234203d3e203133363739.roa
File:                     3230302e31302e3233332e302f32342d3234203d3e203133363739.roa (raw, json)
Hash identifier:          TzdHtyM47tTJY/luyhSb9SvAZV4zuoGd6E8HQkrqVDg=
Subject key identifier:   D5:10:69:FE:ED:F8:38:5E:A4:8C:46:49:E3:2E:F7:D0:4B:00:68:BA
Certificate issuer:       /CN=699C6BD3B24786A710F797596FEEF22BA6C952DB
Certificate serial:       5E71FA8FE53EB19A5303E4E92CBB90C53C02636F
Authority key identifier: 69:9C:6B:D3:B2:47:86:A7:10:F7:97:59:6F:EE:F2:2B:A6:C9:52:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/699C6BD3B24786A710F797596FEEF22BA6C952DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0343EF1DEA18792E0AE8AC7E01E1B65B5ED71A8E0E2FFA4B64BB7C114402F61E/0/3230302e31302e3233332e302f32342d3234203d3e203133363739.roa
Signing time:             Fri 20 Jun 2025 18:10:00 +0000
ROA not before:           Fri 20 Jun 2025 18:05:00 +0000
ROA not after:            Fri 19 Jun 2026 18:10:00 +0000
asID:                     13679
IP address blocks:        200.10.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0343EF1DEA18792E0AE8AC7E01E1B65B5ED71A8E0E2FFA4B64BB7C114402F61E/0/699C6BD3B24786A710F797596FEEF22BA6C952DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0343EF1DEA18792E0AE8AC7E01E1B65B5ED71A8E0E2FFA4B64BB7C114402F61E/0/699C6BD3B24786A710F797596FEEF22BA6C952DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/699C6BD3B24786A710F797596FEEF22BA6C952DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Jun 2025 16:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:71:fa:8f:e5:3e:b1:9a:53:03:e4:e9:2c:bb:90:c5:3c:02:63:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=699C6BD3B24786A710F797596FEEF22BA6C952DB
        Validity
            Not Before: Jun 20 18:05:00 2025 GMT
            Not After : Jun 19 18:10:00 2026 GMT
        Subject: CN=D51069FEEDF8385EA48C4649E32EF7D04B0068BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:ce:e6:b0:8b:29:23:c7:d9:9d:c8:7d:77:
                    ba:1a:ef:94:40:a2:2a:f4:49:e3:56:ac:55:3f:cf:
                    75:c7:ae:bd:bd:49:a0:3b:8b:d5:4c:50:8c:0b:2c:
                    a1:8b:62:a6:5e:01:42:d1:95:0c:f3:c3:3d:db:cb:
                    02:04:9b:55:8d:9a:f2:3e:d4:5b:fa:3f:74:f5:f8:
                    38:b6:34:90:9a:fe:fd:b2:9d:3c:04:15:ef:44:ea:
                    a9:47:de:8f:61:1a:55:84:39:8b:85:e8:bd:e3:3a:
                    5d:94:8f:1d:d8:58:db:3b:c3:f0:9b:4a:a5:85:91:
                    90:5c:a5:0c:13:68:59:77:51:10:89:6a:2f:41:98:
                    06:11:3b:b1:a0:b4:c8:66:6f:f7:33:1a:ca:8c:31:
                    eb:6b:ae:42:87:b8:15:6f:ef:b5:85:93:c5:e4:36:
                    ff:8d:32:78:c6:8a:c4:6b:52:0e:1c:69:b9:9c:fb:
                    87:cf:ae:b0:18:6b:7a:b9:5f:74:a4:c1:72:65:71:
                    26:7a:84:47:c1:5c:97:cf:01:a0:4d:f8:f3:95:d8:
                    d0:a6:ca:f7:82:3b:b0:e6:c8:5c:36:3a:c1:49:ee:
                    66:8a:a5:25:3d:38:76:1d:d5:d7:71:b1:34:47:f3:
                    f2:fb:45:ac:25:60:d6:95:96:e5:23:d0:4a:88:16:
                    e6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:10:69:FE:ED:F8:38:5E:A4:8C:46:49:E3:2E:F7:D0:4B:00:68:BA
            X509v3 Authority Key Identifier:
                keyid:69:9C:6B:D3:B2:47:86:A7:10:F7:97:59:6F:EE:F2:2B:A6:C9:52:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0343EF1DEA18792E0AE8AC7E01E1B65B5ED71A8E0E2FFA4B64BB7C114402F61E/0/699C6BD3B24786A710F797596FEEF22BA6C952DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/699C6BD3B24786A710F797596FEEF22BA6C952DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0343EF1DEA18792E0AE8AC7E01E1B65B5ED71A8E0E2FFA4B64BB7C114402F61E/0/3230302e31302e3233332e302f32342d3234203d3e203133363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:71:b4:fa:d8:d2:bf:46:43:ab:55:04:17:44:03:34:a7:b9:
         01:f5:54:de:d0:bc:01:8d:01:0d:24:96:55:ff:70:1d:0f:3b:
         2a:11:ce:cf:2a:5b:98:c6:f1:3e:07:52:31:2a:23:2e:90:57:
         81:41:e9:4f:ee:da:a9:a8:85:da:01:8f:04:b1:c3:ac:89:9e:
         85:93:36:c1:d5:79:10:34:fb:7d:87:61:1a:8f:08:0b:a8:99:
         1f:26:b1:d4:2b:fe:fc:d1:91:9d:1f:81:4b:8a:11:76:d2:71:
         f3:21:f1:9a:6c:74:af:26:5f:e2:62:26:57:a0:2e:dd:dc:a8:
         2c:93:2b:5d:62:36:28:5e:a6:fb:7e:2f:66:5c:4d:5a:d8:81:
         00:b7:66:ab:e6:07:59:d7:df:69:f3:8d:18:c2:49:03:84:96:
         a2:fa:06:ea:ff:19:47:ac:f3:2c:30:1e:2c:fd:00:ee:7e:ee:
         36:ea:2c:07:1d:63:60:e3:85:c4:06:c1:17:e1:3b:e8:dc:dd:
         69:90:dc:81:8f:f3:94:59:89:6b:94:0c:10:f3:49:85:c4:53:
         10:3e:56:12:b7:cb:f8:a0:8e:d0:99:bb:76:41:c4:46:28:af:
         1b:8b:79:69:b6:f3:43:38:87:cd:a5:64:e5:cd:09:ba:ce:d7:
         32:9f:1f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 14:58:39 2025 by rpki-client